Data storage device with built-in data protection for ultra sensitive applications

• US 7,780,079 B2
• Filed: 05/22/2006
• Issued: 08/24/2010
• Est. Priority Date: 05/22/2006
• Status: Expired due to Fees

• Current Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Original Assignee: Seagate Technology LLC (Seagate Technology Holdings Plc)
• Inventors: Merzlikine, Alexei, Hsia, Yiao-Tee
• Primary Examiner(s): ST CYR, DANIEL
• Application Number:
  US11/438,242
• Publication Number:
  US 20070271471A1
• Time in Patent Office: 1,555 Days
• Field of Search: 235/382, 235/474, 235/486, 455/26.1, 455/421, 455/456, 713/171, 713/176, 713/182, 713/189, 713/194, 713/167, 713/155, 342/357.09, 342/357.11, 342/357.17
• US Class Current: 235/382
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00246 wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
• CPC Class Codes: G11B 2220/2516 Hard disks

Abstract

An apparatus comprises a data storage medium; a remote unit; and an authorization unit for encrypting information to be stored on the storage medium and for controlling access to data stored on the data storage medium in response to the access control signals received from the remote unit. A method of controlling access to data stored on the data storage medium is also provided.

Claims

1. An apparatus comprising:

a data storage device including a data storage medium;

a first remote unit; and

an authorization unit within the data storage device for encrypting information to be stored on the data storage medium using a key received from the first remote unit, wherein the key is stored in volatile memory in the data storage device.

2. The apparatus of claim 1, wherein the authorization unit comprises:

a processor for encrypting information to be stored on the storage medium; and

the key comprises a private key for use by the processor.

3. The apparatus of claim 2, wherein the authorization uses a combination of the private key and a public key for encrypting information to be stored on the storage medium.

4. The apparatus of claim 1, further comprising:

a transmitter for transmitting information about a status of the data storage device to the first remote unit.

5. The apparatus of claim 1, wherein the remote unit comprises:

a user interface;

a key memory;

a transmitter; and

a processor for controlling the transfer of a key from the key memory to the transmitter in response to the user interface.

6. The apparatus of claim 1, wherein the remote unit communicates with the authorization unit over a wireless channel.

7. The apparatus of claim 1, further comprising:

a second remote unit for providing an access control signal to the authorization unit in response to an altimeter.

8. The apparatus of claim 1, further comprising:

a second remote unit for providing an access control signal to the authorization unit in response to spatial coordinates of the apparatus.

9. The apparatus of claim 1, wherein the remote unit further comprises:

a signaling device; and

an override device.

10. The apparatus of claim 1, wherein the key is lost when the data storage device shuts down or loses power.

11. The apparatus of claim 1, wherein the remote unit contains a user rights database.

12. A method comprising:

using an authorization unit within a data storage device to encrypt data to be stored on a data storage medium using a key received from a first remote unit, wherein the key is stored in volatile memory in the data storage device.

13. The method of claim 12, wherein the key is lost when the data storage device shuts down or loses power.

14. The method of claim 12, wherein the key comprises a private key.

15. The method of claim 14, wherein the authorization unit uses a combination of the private key and a public key for encrypting information to be stored on the storage medium.

16. The method of claim 12, wherein the remote unit comprises:

a user interface;

a key memory;

a transmitter; and

a processor for controlling the transfer of key data from the key memory to the transmitter in response to the user interface.

17. The method of claim 12, further comprising:

using a second remote unit to provide an access control signal to the authorization unit in response to an altimeter.

18. The method of claim 12, further comprising:

using a second remote unit to provide an access control signal to the authorization unit in response to spatial coordinates of the apparatus.

19. The method of claim 12, wherein the key that is changed on a regular or irregular basis.

20. The method of claim 12, wherein the authorization unit corrupts data stored on the storage medium in response to a distress signal.